Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
File:                     pOcgX11BJXpruV-QDuwKESPnUWQ.mft (raw, json)
Hash identifier:          oIK4XZ1v7SmiXop+Na64weUeq2iZf30DpBbzp8Ksjpg=
Subject key identifier:   AB:74:D7:EA:85:4B:61:46:3B:4B:35:86:97:44:F0:35:42:6F:08:AB
Authority key identifier: A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64
Certificate issuer:       /CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
Certificate serial:       01A0C47BDB911857BF2E548A1207C4937B63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
Manifest number:          1A82
Signing time:             Mon 21 Sep 2026 15:00:46 +0000
Manifest this update:     Mon 21 Sep 2026 15:00:46 +0000
Manifest next update:     Tue 22 Sep 2026 15:00:46 +0000
Files and hashes:         1: D0b2st4kB0weMy1uupHyMAGTb9g.roa (hash: vQda05HrzkU1IyMBB1j9zKmjTTBENzFC7uXcsT0ZP94=)
                          2: DuuYCp8yBXOQUKLRXxTFSxkAkcU.roa (hash: +4nJxPOiQjKTWlj/G+DQSaRFc4r4eqiXGvs/HIW5h3I=)
                          3: EyR92aUa1YmyikBuKCPnhyQ6dQc.roa (hash: 7q/CmNDf+Nlfn++5VpeQfpPGbf0jec81JQlzO3KTrAc=)
                          4: OhtO9gQuXsBPS-Q3O3FN8E4x348.roa (hash: o+Nr9wOEwTpH2Y6JMdDgtincCGDhZv31TNiZL0Hk3Bs=)
                          5: dSJlaCjFuYDBOJIJw5vLziFG1uU.roa (hash: nej4liEik7v+gIS3TpTB1V+1cfOzTtgee4Q4bmAbVjg=)
                          6: jL7QdWjDXB9JW6f9-Q9ZstSxp6U.roa (hash: LOg/Dt0W3pYHYeSmEl6aami7s1ai7PjIohxmCU72EI4=)
                          7: pOcgX11BJXpruV-QDuwKESPnUWQ.crl (hash: rKRA4wFLkWhKRPwe/bRDMoUPN40xZ6w8gKEBJypacqE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:7b:db:91:18:57:bf:2e:54:8a:12:07:c4:93:7b:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
        Validity
            Not Before: Sep 21 15:00:46 2026 GMT
            Not After : Sep 22 15:00:46 2026 GMT
        Subject: CN=ab74d7ea854b61463b4b35869744f035426f08ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:70:db:66:31:fe:a5:76:07:98:fd:1c:9a:24:
                    72:2e:d0:61:0b:97:72:cd:bd:26:f7:f5:bc:23:4a:
                    19:13:4f:52:68:4a:df:c8:db:67:7a:81:75:fe:da:
                    1a:a3:9a:37:56:69:f2:0a:14:d1:12:08:ea:27:38:
                    92:34:c5:e7:c7:80:91:15:4a:d6:33:15:1b:0c:04:
                    5b:6f:9f:2c:91:85:02:ad:f8:a8:9c:7b:c4:a4:43:
                    19:4b:bd:93:86:06:04:d1:19:40:67:be:44:44:b8:
                    b0:fe:a4:96:c8:bf:14:1e:37:00:49:9c:f2:06:f5:
                    dc:1d:b9:e2:8c:69:35:18:fe:1f:b0:5d:05:78:9d:
                    da:5f:a5:d1:fb:72:5a:bc:45:8b:9d:5f:48:61:93:
                    26:d0:dc:fc:74:73:40:ec:9c:fd:c3:e9:e8:f1:63:
                    df:eb:d6:83:10:fe:c7:df:69:63:f4:be:05:34:3b:
                    a0:ec:94:0d:a5:ae:2d:8f:8e:b7:4c:0b:85:6b:0c:
                    1d:d1:91:fc:34:09:21:35:f7:c2:7c:ed:90:a6:63:
                    ed:f4:61:48:c1:bf:bc:3e:4b:03:9a:fd:66:77:1e:
                    f5:c3:2d:24:a3:ab:d6:87:d4:3e:bb:03:7e:4d:d7:
                    78:77:01:8a:37:a5:f4:cb:c5:3a:9c:4c:4d:b5:61:
                    ef:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:74:D7:EA:85:4B:61:46:3B:4B:35:86:97:44:F0:35:42:6F:08:AB
            X509v3 Authority Key Identifier:
                keyid:A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:2d:d0:ae:f6:b6:2d:51:42:65:9a:91:74:f6:c6:10:d5:9d:
         63:12:13:9d:ec:69:31:32:92:00:27:24:6a:ca:98:64:09:b5:
         e4:36:99:4d:89:3d:29:ae:02:b8:f1:b0:07:55:be:a7:a9:fc:
         8d:d9:e4:7d:a0:64:ca:04:f3:47:2d:b0:f4:8e:50:1a:80:52:
         d2:2b:97:af:c9:c3:b7:ca:a5:3d:40:4f:7d:5c:37:c5:f7:db:
         b0:fe:4a:f9:fc:51:63:1d:5c:e0:af:da:e1:b4:25:23:d8:2c:
         68:5a:0c:ac:a7:f7:0b:bb:9c:21:ea:1d:cf:d1:f8:1c:ad:56:
         10:16:b1:b6:de:fa:9c:49:73:04:c0:42:0b:6e:c2:0e:d5:08:
         59:9d:03:af:98:11:b6:63:8d:c2:9c:6d:19:00:14:ed:87:23:
         b6:f1:6a:f2:9b:ba:e0:15:82:d3:5d:19:21:a9:ec:64:f1:22:
         54:11:8a:64:52:2b:09:3d:97:fe:27:53:ce:3a:58:9a:78:93:
         6d:99:74:94:92:73:70:0b:e7:0d:b8:e3:6a:f7:14:90:12:95:
         70:ca:69:51:f6:f7:8f:11:b8:74:ad:ea:f6:7e:e2:c8:b5:36:
         34:98:ca:f4:0c:72:3b:31:04:0d:22:4d:f3:c3:da:fd:b2:34:
         52:93:96:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEe9uRGFe/LlSKEgfEk3tjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZTcyMDVmNWQ0MTI1N2E2YmI5NWY5MDBlZWMwYTExMjNl
NzUxNjQwHhcNMjYwOTIxMTUwMDQ2WhcNMjYwOTIyMTUwMDQ2WjAzMTEwLwYDVQQD
EyhhYjc0ZDdlYTg1NGI2MTQ2M2I0YjM1ODY5NzQ0ZjAzNTQyNmYwOGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHDbZjH+pXYHmP0cmiRyLtBhC5dy
zb0m9/W8I0oZE09SaErfyNtneoF1/toao5o3VmnyChTREgjqJziSNMXnx4CRFUrW
MxUbDARbb58skYUCrfionHvEpEMZS72ThgYE0RlAZ75ERLiw/qSWyL8UHjcASZzy
BvXcHbnijGk1GP4fsF0FeJ3aX6XR+3JavEWLnV9IYZMm0Nz8dHNA7Jz9w+no8WPf
69aDEP7H32lj9L4FNDug7JQNpa4tj463TAuFawwd0ZH8NAkhNffCfO2QpmPt9GFI
wb+8PksDmv1mdx71wy0ko6vWh9Q+uwN+Tdd4dwGKN6X0y8U6nExNtWHvmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKt01+qFS2FGO0s1hpdE8DVCbwirMB8GA1UdIwQY
MBaAFKTnIF9dQSV6a7lfkA7sChEj51FkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE9jZ1gxMUJKWHBydVYtUUR1d0tFU1BuVVdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9mNzYxYmQtNWMzYS00ZDJmLThjZDkt
M2U1OWNlNDQ1YjFjLzEvcE9jZ1gxMUJKWHBydVYtUUR1d0tFU1BuVVdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9mNzYxYmQtNWMzYS00ZDJmLThjZDktM2U1OWNlNDQ1YjFj
LzEvcE9jZ1gxMUJKWHBydVYtUUR1d0tFU1BuVVdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUS3Qrva2
LVFCZZqRdPbGENWdYxITnexpMTKSACckasqYZAm15DaZTYk9Ka4CuPGwB1W+p6n8
jdnkfaBkygTzRy2w9I5QGoBS0iuXr8nDt8qlPUBPfVw3xffbsP5K+fxRYx1c4K/a
4bQlI9gsaFoMrKf3C7ucIeodz9H4HK1WEBaxtt76nElzBMBCC27CDtUIWZ0Dr5gR
tmONwpxtGQAU7YcjtvFq8pu64BWC010ZIansZPEiVBGKZFIrCT2X/idTzjpYmniT
bZl0lJJzcAvnDbjjavcUkBKVcMppUfb3jxG4dK3q9n7iyLU2NJjK9AxyOzEEDSJN
88Pa/bI0UpOWew==
-----END CERTIFICATE-----
Generated at Tue Sep 22 01:23:24 2026 by rpki-client